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Abstract. We study sequential programs that are instruction sequences 
with direct and indirect jump instructions. The intuition is that indirect 
jump instructions are jump instructions where the position of the instruc- 
tion to jump to is the content of some memory cell. We consider several 
kinds of indirect jump instructions. For each kind, we define the mean- 
ing of programs with indirect jump instructions of that kind by means 
of a translation into programs without indirect jump instructions. For 
each kind, the intended behaviour of a program with indirect jump in- 
structions of that kind under execution is the behaviour of the translated 
program under execution on interaction with some memory device. 
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1 Introduction 

We take the view that sequential programs are in essence sequences of instruc- 
tions. Although finite state programs with direct and indirect jump instructions 
are as expressive as finite state programs with direct jump instructions only, 
indirect jump instructions are widely used. For example, return instructions, in 
common use to implement recursive method calls in programming language such 
as Java [11] and C# [12], are indirect jump instructions. Therefore, we consider 
a theoretical understanding of both direct jump instructions and indirect jump 
instructions highly relevant to programming. In [3], sequential programs that are 
instruction sequences with direct jump instructions are studied. In this paper, 
we study sequential programs that are instruction sequences with both direct 
jump instructions and indirect jump instructions. 

We believe that interaction with components of an execution environment, 
in particular memory devices, is inherent in the behaviour of programs under 
execution. Intuitively, indirect jump instructions are jump instructions where the 
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position of the instruction to jump to is the content of some memory cell. In this 
paper, we consider several kinds of indirect jump instructions, including return 
instructions. For each kind, we define the meaning of programs with indirect 
jump instructions of that kind by means of a translation into programs without 
indirect jump instructions. For each kind, the intended behaviour of a program 
with indirect jump instructions of that kind under execution is the behaviour 
of the translated program under execution on interaction with some memory 
device. We also describe the memory devices concerned, to wit register files and 
stacks. 

The approach to define the meaning of programs mentioned above is intro- 
duced under the name projection semantics in [3]. Projection semantics explains 
the meaning of programs in terms of known programs instead of more or less 
sophisticated mathematical objects that represent behaviours. The main advan- 
tage of projection semantics is that it does not require a lot of mathematical 
background. In the present case, another advantage of projection semantics is 
that it follows immediately that indirect jump instructions of the kinds consid- 
ered can be eliminated from programs in the presence of an appropriate memory 
device. We will study sequential programs that are instruction sequences with 
direct and indirect jump instructions in the setting in which projection seman- 
tics has been developed so far: the setting of program algebra and basic thread 
algebra. 3 

Program algebra is an algebra of deterministic sequential programs based on 
the idea that such programs are in essence sequences of instructions. Basic thread 
algebra is a form of process algebra which is tailored to the description of the 
behaviour of deterministic sequential programs under execution. A hierarchy 
of program notations rooted in program algebra is introduced in [3]. In this 
paper, we embroider on two program notations that belong to this hierarchy. The 
program notations in question, called PGLC and PGLD, are close to existing 
assembly languages. The main difference between them is that PGLC has relative 
jump instructions and PGLD has absolute jump instructions. 

A thread proceeds by doing steps in a sequential fashion. A thread may do 
certain steps only for the sake of having itself affected by some service. In [9], 
the use mechanism is introduced to allow for such interaction between threads 
and services. The interaction between behaviours of programs under execution 
and some memory device referred to above is an interaction of this kind. In this 
paper, we will use a slightly adapted form of the use mechanism, called thread- 
service composition, to have behaviours of programs under execution affected by 
services. 

This paper is organized as follows. First, we review basic thread algebra, 
program algebra, and the program notations PGLC and PGLD (Sections 2, 3, 
and 4). Next, we extend basic thread algebra with thread-service composition 
and introduce a state-based approach to describe services (Sections 5 and 6). 

3 In [3], basic thread algebra is introduced under the name basic polarized process 
algebra. Prompted by the development of thread algebra [7], which is a design on 
top of it, basic polarized process algebra has been renamed to basic thread algebra. 
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Following this, we give a state-based description of register file services and in- 
troduce variants of the program notations PGLC and PGLD with indirect jump 
instructions (Sections 7, 8, and 9). We also introduce a variant of one of those 
program notations with double indirect jump instructions (Section 10). After 
that, we give a state-based description of stack services and introduce a variant 
of the program notation PGLD with returning jump instructions and return 
instructions (Sections 11 and 12). Finally, we make some concluding remarks 
(Section 13). 

2 Basic Thread Algebra 

In this section, we review BTA (Basic Thread Algebra), a form of process algebra 
which is tailored to the description of the behaviour of deterministic sequential 
programs under execution. The behaviours concerned are called threads. 

In BTA, it is assumed that there is a fixed but arbitrary finite set of basic 
actions A. The intuition is that each basic action performed by a thread is 
taken as a command to be processed by a service provided by the execution 
environment of the thread. The processing of a command may involve a change of 
state of the service concerned. At completion of the processing of the command, 
the service produces a reply value. This reply is cither T or F and is returned to 
the thread concerned. 

Although BTA is one-sorted, we make this sort explicit. The reason for this 
is that we will extend BTA with an additional sort in Section 5. 

The algebraic theory BTA has one sort: the sort T of threads. To build terms 
of sort T, BTA has the following constants and operators: 

— the deadlock constant D : T; 

— the termination constant S : T; 

— for each a G A, the binary postconditional composition operator 
.<a>.:TxT^T. 

Terms of sort T are built as usual (see e.g. [16, 17]). Throughout the paper, we 
assume that there are infinitely many variables of sort T, including x,y, z. 

We use infix notation for postconditional composition. We introduce action 
prefixing as an abbreviation: nop, where p is a term of sort T, abbreviates 
P <! a > p. 

Let p and q be closed terms of sort T and a e A. Then p < a > q will perform 
action a, and after that proceed as p if the processing of a leads to the reply 
T (called a positive reply), and proceed as q if the processing of a leads to the 
reply F (called a negative reply). 

Each closed BTA term of sort T denotes a finite thread, i.e. a thread of which 
the length of the sequences of actions that it can perform is bounded. Guarded 
recursive specifications give rise to infinite threads. 

A guarded recursive specification over BTA is a set of recursion equations 
E = {X = tx X E V}, where V is a set of variables of sort T and each tx 
is a term of the form D, S or t < a > t' with t and t' BTA terms of sort T that 
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Table 1. Axioms for guarded recursion 



(X\E) = (t x \E) \fX = tx€E RDP 
E ^ X = (X\E) \f X eV(E) RSP 



contain only variables from V. We write V(E) for the set of all variables that 
occur on the left-hand side of an equation in E. We are only interested in models 
of BTA in which guarded recursive specifications have unique solutions, such as 
the projective limit model of BTA presented in [1]. A thread that is the solution 
of a finite guarded recursive specification over BTA is called a finite-state thread. 

We extend BTA with guarded recursion by adding constants for solutions 
of guarded recursive specifications and axioms concerning these additional con- 
stants. For each guarded recursive specification E and each X G Y(E), we add a 
constant of sort T standing for the unique solution of E for X to the constants 
of BTA. The constant standing for the unique solution of E for X is denoted by 
(X\E). Moreover, we add the axioms for guarded recursion given in Table 1 to 
BTA, where we write (tx\E) for tx with, for all Y G V(.E), all occurrences of 
Y in tx replaced by (Y\E). In this table, X, tx and E stand for an arbitrary 
variable of sort T, an arbitrary BTA term of sort T and an arbitrary guarded re- 
cursive specification over BTA, respectively. Side conditions are added to restrict 
the variables, terms and guarded recursive specifications for which X, tx and E 
stand. The equations (X\E) = (tx\E) for a fixed E express that the constants 
(X\E) make up a solution of E. The conditional equations E =>■ X = (X\E) 
express that this solution is the only one. 

We will write BTA+REC for BTA extended with the constants for solutions 
of guarded recursive specifications and axioms RDP and RSP. 

In [5], we show that the threads considered in BTA+REC can be viewed as 
processes that are definable over ACP [10]. 

3 Program Algebra 

In this section, we review PGA (ProGram Algebra), an algebra of sequential 
programs based on the idea that sequential programs are in essence sequences 
of instructions. PGA provides a program notation for finite-state threads. 

In PGA, it is assumed that there is a fixed but arbitrary finite set 21 of basic 
instructions. PGA has the following primitive instructions: 

— for each a G 21, a plain basic instruction a; 

— for each a G 21, a positive test instruction +a; 

— for each a G 21, a negative test instruction —a; 

— for each I G N, a forward jump instruction 

— a termination instruction !. 

We write 3 for the set of all primitive instructions. 
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Table 2. Axioms of PGA 



(x ; y) ; z = x ; (y ; z) 


PGA1 


(x n y = x w 


PGA2 


x w ; y = x w 


PGA3 


{x ; yf = x ; (y ; k) w 


PGA4 



The intuition is that the execution of a basic instruction a may modify a 
state and produces T or F at its completion. In the case of a positive test in- 
struction +o, basic instruction a is executed and execution proceeds with the 
next primitive instruction if T is produced and otherwise the next primitive 
instruction is skipped and execution proceeds with the primitive instruction fol- 
lowing the skipped one. In the case where T is produced and there is not at least 
one subsequent primitive instruction and in the case where F is produced and 
there are not at least two subsequent primitive instructions, deadlock occurs. 
In the case of a negative test instruction —a, the role of the value produced is 
reversed. In the case of a plain basic instruction a, the value produced is disre- 
garded: execution always proceeds as if T is produced. The effect of a forward 
jump instruction ffl is that execution proceeds with the l-th next instruction of 
the program concerned. If I equals or the l-th next instruction does not exist, 
then #Z results in deadlock. The effect of the termination instruction ! is that 
execution terminates. 

PGA has the following constants and operators: 

— for each u G 3, an instruction constant u ; 

— the binary concatenation operator _ ; _ ; 

— the unary repetition operator _ w . 

Terms are built as usual. Throughout the paper, we assume that there are in- 
finitely many variables, including x,y,z. 

We use infix notation for concatenation and postfix notation for repetition. 

Closed PGA terms are considered to denote programs. The intuition is that 
a program is in essence a non-empty, finite or infinite sequence of primitive in- 
structions. These sequences are called single pass instruction sequences because 
PGA has been designed to enable single pass execution of instruction sequences: 
each instruction can be dropped after it has been executed. Programs are consid- 
ered to be equal if they represent the same single pass instruction sequence. The 
axioms for instruction sequence equivalence arc given in Table 2. In this table, 
n stands for an arbitrary natural number greater than 0. For each n > 0, the 
term x n is defined by induction on n as follows: x 1 = x and x n+1 = x ; x n . The 
unfolding equation x^ = x ; i u is derivable. Each closed PGA term is derivably 
equal to a term in canonical form, i.e. a term of the form P or P ; Q w , where P 
and Q are closed PGA terms that do not contain the repetition operator. 

Each closed PGA term is considered to denote a program of which the be- 
haviour is a finite-state thread, taking the set 21 of basic instructions for the set A 
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Table 3. Defining equations for thread extraction operator 



a\ = aoD |#i| = D 

a ; x\ = a o \x\ |#0 ; x\ = D 

+a|=aoD |#l;a;| = |a;| 

+a;x\ = \x\ <a> \#2 ; x\ \#l + 2 ; u\ = D 

-a|=aoD |#Z + 2 ; it; x\ = |#Z + 1 ;x\ 

-a;x\ = \#2;x\<a>\x\ |!| = S 



Table 4. Rule for cyclic jump chains 



x = #0 ; v => \x\ = D 



Table 5. Defining formulas for structural congruence predicate 

#n + 1 ; ui ; . . . ; u„ ; #0 = #0 ; Mi ; . . . ; u„ ; #0 

#n + 1 ; ui ; . . . ; u n ; #m = #m + ti + 1 ; in ; . . . ; w„ ; #m 

(#n + I + 1 ; iti ; . . . ; it„) w = (#/ ; «i ; . . . ; m„) w 

#771 + n + / + 2 ; tii ; . . . ; it„ ; (vi ; . . . ; v m +i ) w = 

#n + I + 1 ; iti ;...;«„; («i ; ... ; » m+ i) w 

a; ^ x 

H~!/lAl2=!/2 => X\ ; X2 = Hi ;1J2 /\ X!" = J/i" 



of actions. The thread extraction operator |_| assigns a thread to each program. 
The thread extraction operator is defined by the equations given in Table 3 (for 
a G 21, I € N and u E 3) and the rule given in Table 4. This rule is expressed 
in terms of the structural congruence predicate _ = _, which is defined by the 
formulas given in Table 5 (for n, to, I £ N and ui, . . . , u n , v\, . . . , v m +\ € J). 

The equations given in Table 3 do not cover the case where there is a cyclic 
chain of forward jumps. Programs are structural congruent if they are the same 
after removing all chains of forward jumps in favour of single jumps. Because 
a cyclic chain of forward jumps corresponds to #0, the rule from Table 4 can 
be read as follows: if x starts with a cyclic chain of forward jumps, then |x| 
equals D. It is easy to see that the thread extraction operator assigns the same 
thread to structurally congruent programs. Therefore, the rule from Table 4 can 
be replaced by the following generalization: x = y => \x\ = \y\. 

Let E be a finite guarded recursive specification over BTA, and let Px be a 
closed PGA term for each X S V(£'). Let E 1 be the set of equations that results 
from replacing in E all occurrences of X by \Px\ for each X e X(E). If E' can 
be obtained by applications of axioms PGA1-PGA4, the defining equations for 
the thread extraction operator and the rule for cyclic jump chains, then \Px\ is 
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the solution of E for X. Such a finite guarded recursive specification can always 
be found. Thus, the behaviour of each closed PGA term, is a thread that is 
definable by a finite guarded recursive specification over BTA. Moreover, each 
finite guarded recursive specification over BTA can be translated to a closed 
PGA term of which the behaviour is the solution of the finite guarded recursive 
specification concerned. 

Closed PGA terms are loosely called PGA programs. PGA programs in which 
the repetition operator do not occur are called finite PGA programs. 

4 The Program Notations PGLC and PGLD 

In this section, we review two program notations which are rooted in PGA. These 
program notations, called PGLC and PGLD, belong to a hierarchy of program 
notations introduced in [3]. 

Both PGLC and PGLD are close to existing assembly languages. The main 
difference between them is that PGLC has relative jump instructions and PGLD 
has absolute jump instructions. PGLC and PGLD have no explicit termination 
instruction. 

In PGLC and PGLD, like in PGA, it is assumed that there is a fixed but 
arbitrary set of basic instructions 21. Again, the intuition is that the execution of 
a basic instruction a may modify a state and produces T or F at its completion. 

PGLC has the following primitive instructions: 

— for each a G 21, a plain basic instruction a; 

— for each a £ 21, a positive test instruction +a; 

— for each a G 21, a negative test instruction —a; 

— for each IeN, a direct forward jump instruction #1; 

— for each Z <E N, a direct backward jump instruction \#Z. 

PGLC programs have the form u\ ; . . . ; u/,, where u\,...,Uk are primitive in- 
structions of PGLC. 

The plain basic instructions, the positive test instructions, and the negative 
test instructions are as in PGA, except that termination instead of deadlock 
occurs in the case where there are insufficient subsequent primitive instructions. 
The effect of a direct forward jump instruction #Z is that execution proceeds 
with the Z-th next instruction of the program concerned. If I equals 0, then 
deadlock occurs. If the Z-th next instruction does not exist, then termination 
occurs. The effect of a direct backward jump instruction \#l is that execution 
proceeds with the Z-th previous instruction of the program concerned. If Z equals 
0, then deadlock occurs. If the Z-th previous instruction does not exist, then 
termination occurs. 

We define the meaning of PGLC programs by means of a function pglc2pga 
from the set of all PGLC programs to the set of all PGA programs. This function 
is defined by 

pglc2pga(ui ;...;u k ) = OiOi) 5 • ■ • ; ipk{u k ) ;!;!)", 
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where the auxiliary functions ipj from the set of all primitive instructions of 
PGLC to the set of all primitive instructions of PGA are defined as follows 
(l<J<k): 



if j + I < k , 
if j + l> k , 
if I < j , 

in > j , 

if u is not a jump instruction . 



iPj(\W) = #k + 2-l 



^•(Y#0 = ! 



The idea is that each backward jump can be replaced by a forward jump if 
the entire program is repeated. To enforce termination of the program after 
execution of its last instruction if the last instruction is a plain basic instruction, 
a positive test instruction or a negative test instruction, ! ; ! is appended to 
V>i(ui) ; . . . ; ipk(uk)- 

Let P be a PGLC program. Then pglc2pga(P) represents the meaning 
of P as a PGA program. The intended behaviour of P is the behaviour of 
pglc2pga(P). That is, the behaviour of P, written |P| PG lc, is |pglc2pga(P)|. 

PGLD has the following primitive instructions: 

— for each a G 21, a plain basic instruction a; 

— for each a G 21, a positive test instruction +a; 

— for each a G 21, a negative test instruction —a; 

— for each I G N, a direct absolute jump instruction 

PGLD programs have the form m;...;Uk, where u\,. . . ,Uk are primitive in- 
structions of PGLD. 

The plain basic instructions, the positive test instructions, and the negative 
test instructions are as in PGLC. The effect of a direct absolute jump instruc- 
tion is that execution proceeds with the l-th instruction of the program 
concerned. If is itself the l-th instruction, then deadlock occurs. If I equals 
or I is greater than the length of the program, then termination occurs. 

We define the meaning of PGLD programs by means of a function pgld2pglc 
from the set of all PGLD programs to the set of all PGLC programs. This 
function is defined by 

pgld2pglc(Mi ; . . . ; u k ) = ^i(tii) ; . . . ; Vfe(«fe) , 

where the auxiliary functions ipj from the set of all primitive instructions of 
PGLD to the set of all primitive instructions of PGLC are defined as follows 



(1 <j< k): 



^•(##0 
^■(##0 



u 



\#j — i\fi<j, 



if u is not a jump instruction . 
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Let P be a PGLD program. Then pgld2pglc(P) represents the mean- 
ing of P as a PGLC program. The intended behaviour of P is the be- 
haviour of pgld2pglc(P). That is, the behaviour of P, written \P\ 

PGLD i IS 

|pgld2pglc(P)| PGLC . 

We use the phrase projection semantics to refer to the approach to semantics 
followed in this section. The meaning functions pglc2pga and pgld2pglc are 
called projections. 

PGLC and PGLD are very simple program notations. The hierarchy of pro- 
gram notations introduced in [3] also includes a program notation, called PGLS, 
that supports structured programming by offering conditional and loop con- 
structs instead of (unstructured) jumps. Each PGLS program can be translated 
into a semantically equivalent PGLD program by means of a number of projec- 
tions. 

5 Interaction of Threads with Services 

A thread may perform certain actions only for the sake of getting reply values 
returned by a service and that way having itself affected by that service. In this 
section, we introduce thread-service composition, which allows for threads to be 
affected by services in this way. We will only use thread-service composition to 
have program behaviours affected by a service. Thread-service composition is a 
slightly adapted form of the use mechanism introduced in [9]. 

We consider only deterministic services. This will do in the case that we 
address: services that keep private data for a program. The services concerned 
are para-target services by the classification given in [6] . 

It is assumed that there is a fixed but arbitrary finite set of foci T and a fixed 
but arbitrary finite set of methods A4. Each focus plays the role of a name of a 
service provided by the execution environment that can be requested to process 
a command. Each method plays the role of a command proper. For the set A 
of actions, we take the set {/.to | / G T, m G A4}. Performing an action /.to is 
taken as making a request to the service named / to process command m. 

We introduce yet another sort: the sort S of services. However, we will not 
introduce constants and operators to build terms of this sort. S is a parameter 
of theories with thread-service composition. S is considered to stand for the set 
of all services. It is assumed that each service can be represented by a function 
H : M + -> {T, F, B} with the property that H(a) = B => H(a ^ (m)) = B for 
all a G M + and m G M. This function is called the reply function of the service. 
Given a reply function H and a method m G M, the derived reply function of 
H after processing m, written -£^H, is defined by -^H(a) = H((m) ^a). 

The connection between a reply function H and the service represented by 
it can be understood as follows: 

— if H((m)) = T, the request to process command to is accepted by the service, 
the reply is positive and the service proceeds as -g^H', 

— if H({m)) = F, the request to process command m is accepted by the service, 
the reply is negative and the service proceeds as -§^H; 
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Table 6. Axioms for thread-service composition 



S/ f H = S 
D // H = D 



TSC1 



TSC2 



(x <g.m\> y) / f H 
(x < f.m >y)/ f H 
(x < f.m >y)/ f H 
(x < f.m >y)/ f H 



{x/ f H)<g.m>(y/,H) if / ^ g 

y/fit H if^(M) 

D if H((m)) 



T 



B 



F 



TSC4 



TSC3 



TSC6 



TSC5 



- if H((m)) = B, the request to process command m is not accepted by the 



Henceforth, we will identify a reply function with the service represented by it. 

For each / G T, we introduce the binary thread- service composition operator 
.//.:TxS->T. Intuitively p // H is the thread that results from processing 
all actions performed by thread p that are of the form f.m by service H. Service 
H affects thread p by means of the reply values produced at completion of the 
processing of the actions performed by p. The actions processed by H are no 
longer observable. 

The axioms for the thread-service composition operator are given in Table 6. 
In this table, / stands for an arbitrary focus from !F, m stands for an arbitrary 
method from M. Axiom TSC3 expresses that actions of the form g.m, where / ^ 
g, are not processed. Axioms TSC4 and TSC5 express that a thread is affected 
by a service as described above when an action of the form f.m performed by the 
thread is processed by the service. Axiom TSC6 expresses that deadlock takes 
place when an action to be processed is not accepted. 

Let T stand for either BTA or BTA+REC. Then we will write T + TSC for 
T, taking the set {f.m \ f £ J 7 , m £ Ai} for A, extended with the thread-service 
composition operators and the axioms from Table 6. 

In [5], we show that the services considered here can be viewed as processes 
that arc definable over an extension of ACP with conditionals introduced in [4] . 

6 State-Based Description of Services 

In this section, we introduce the state-based approach to describe families of 
services that will be used later on. This approach is similar to the approach to 
describe state machines introduced in [9]. 

In this approach, a family of services is described by 

— a set of states 5; 

— an effect function eff:M x S — > S; 

— a yield function yld : M x S — > {T, F, B}; 



service. 
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satisfying the following condition: 

3s £ S • Vra e M . 

(j/Zd(m, s) = B A Ms' £ 5 . (yld(m, s') = B e/f (m, s') = s)) . 

The set 5 1 contains the states in which the services may be; and the functions eff 
and yld give, for each method m and state s, the state and reply, respectively, 
that result from processing m in state s. 

We define, for each s £ S, a cumulative effect function ce/f s : .M* — > 5 in 
terms of s and e/f as follows: 

ceff a (()) = s, 

ceff s (ot ^ (m» = eif (m, ceff s {o)) . 

We define, for each sg5, a service if s : ,M + — > {T, F, B} in terms of ce^f s and 
yld as follows: 

iJ s (a rx ( m )) = jH( m , ceff s (a)) . 

H s is called the service with initial state s described by S, eff and yld. We say 
that {-ff s s £ S} is the family of services described by S, eff and yld. 

For each s £ S, H s is a service indeed: the condition imposed on 5, e/f and 
yld implies that H s (a) = B => i? s (a ^ (to)) = B for all a e A1 + and m G M. 
It is worth mentioning that H 8 {{m)) = yld{m, s) and -£^H S = H e ff( miS y 

7 Register File Services 

In this section, we give a state-based description of the very simple family of 
services that constitute a register file of which the registers can contain natural 
numbers up to some bound. This register file will be used in Sections 8-10 to 
describe the behaviour of programs in variants of PGLC and PGLD with indirect 
jump instructions. 

It is assumed that a fixed but arbitrary number I has been given, which is 
considered the number of registers available. It is also assumed that a fixed but 
arbitrary number N has been given, which is considered the greatest natural 
number that can be contained in a register. 

The register file services accept the following methods: 

— for each i £ [0,1] and n £ [0,7V], a register set method set:i:n; 

— for each i £ [0,1] and n £ [0,7V], a register test method eq:i:n. 

We write M regs for the set {set:z:n, eq:i:n | i £ [0,1] An £ [0, N]}. It is assumed 

that Mregs C M. 

The methods accepted by register file services can be explained as follows: 

— set:i:n: the contents of register i becomes n and the reply is T; 

— eq:z:n: if the contents of register i equals n, then nothing changes and the 
reply is T; otherwise nothing changes and the reply is F. 

Let s : [1,1] — ► [0,iV]. Then we write Regs s for the service with initial state 
s described by S = ([1,1] -> [0,N]) U {|}, where | g [1,7] -> [0,JV], and the 
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functions eff and yld denned as follows (n G [0, N], p : [1, 1] — > [0, A^]): 4 

eff (set:i:n, p) = p © [i i— ► n] , 
eff(eq:i:n,p) = p , 

eff{m, p) = T if to g -M reg s , 

e#(m, T) = T , 

yld(set:i:n, p) = T , 

yld(eq:i:n, p) = T if = n , 

yld(eq:i:n, p) = F if 7^ n , 

yld(m, p) = B if m ^ -M re gs , 

»W(m, T) = B . 

We write i?e 5 s init for ^e</s [lM0]e ... ffi[jM0] . 



8 PGLD with Indirect Jumps 

In this section, we introduce a variant of PGLD with indirect jump instructions. 
This variant is called PGLDjj. 

In PGLDjj, it is assumed that there is a fixed but arbitrary finite set of foci 
T with regs G T and a fixed but arbitrary finite set of methods A4. Moreover, 
we adopt the assumptions made about register file services in Section 7. The set 
{f.m /ef,me M} is taken as the set 21 of basic instructions. 

PGLDjj has the following primitive instructions: 

— for each a G 21, a plain basic instruction a; 

— for each a G 21, a positive test instruction +a; 

— for each a G 21, a negative test instruction —a; 

— for each I G N, a direct absolute jump instruction ##/; 

— for each i G [1,/], an indirect absolute jump instruction i##i. 

PGLDjj programs have the form u\ ; . . . ; Uk, where u\,...,Uk are primitive 
instructions of PGLDjj. 

The plain basic instructions, the positive test instructions, the negative test 
instructions, and the direct absolute jump instructions are as in PGLD. The 
effect of an indirect absolute jump instruction is that execution proceeds 

with the l-th instruction of the program concerned, where I is the content of 
register i. If i##i is itself the l-th instruction, then deadlock occurs. If I equals 
or I is greater than the length of the program, termination occurs. 

4 We use the following notation for functions: / © g for the function h with dom(ft) = 
dom(/) U dom(<;) such that for all d G dom(ft), h(d) — f(d) if d £ dom(<;) and 
h(d) = g(d) otherwise; and [d 1— > r] for the function / with dom(/) = {d} such that 
f(d) 
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Recall that the content of register i can be set to I by means of the basic 
instruction regs.set:i:Z. Initially, its content is 0. 

Like before, we define the meaning of PGLDjj programs by means of a func- 
tion pgldij2pgld from the set of all PGLDjj programs to the set of all PGLD 
programs. This function is defined by 

pgldij2pgld(ui ; .. . ; u k ) = 
V>(ui) ; . . . ; <AK) ; ##0 ; ##0 ; 
+regs.eq:l:l ; ##1 ; . . . ; +regs.eq:l:n ; ##n ; ##0 ; 

+regs.eq:/:l ; ##1 ; . . . ; +regs.eq:/:n ; ##n ; ##0 , 

where n — min(fc, N) and the auxiliary function ip from the set of all primitive 
instructions of PGLDjj to the set of all primitive instructions of PGLD is defined 
as follows: 

iK##0 = in < k > 
iK##0 = ##o if i > k , 

= ##*< , 

ip(u) = u if u is not a jump instruction , 

and for each i £ [1, 1]: 

h = k + 3 + (2 • min(fc, N) + 1) • (i - 1) . 

The idea is that each indirect absolute jump can be replaced by a direct absolute 
jump to the beginning of the instruction sequence 

+regs.eq:i:l ; ##1 ; . . . ; +regs.eq±n ; ##n ; ##0 , 

where i is the register concerned and n = min(fc, N). The execution of this 
instruction sequence leads to the intended jump after the content of the register 
concerned has been found by a linear search. To enforce termination of the 
program after execution of its last instruction if the last instruction is a plain 
basic instruction, a positive test instruction or a negative test instruction, ##0 ; 
##0 is appended to i • • • i ^P{ u k)- Because the length of the translated 

program is greater than k, care is taken that there are no direct absolute jumps 
to instructions with a position greater than k. Obviously, the linear search for 
the content of a register can be replaced by a binary search. 

Let P be a PGLDy program. Then pgldij2pgld(P) represents the meaning 
of P as a PGLD program. The intended behaviour of P is the behaviour of 
pgldij2pgld(P) on interaction with a register file. That is, the behaviour of P, 
written |P|pgld; , is |pgldij2pgld(P)| PGLD / regs Regs init . 

More than one instruction is needed in PGLD to obtain the effect of a sin- 
gle indirect absolute jump instruction. The projection pgldij2pgld deals with 
that in such a way that there is no need for the unit instruction operator intro- 
duced in [15] or the distinction between first-level instructions and second-level 
instructions introduced in [2]. 
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9 PGLC with Indirect Jumps 



In this section, we introduce a variant of PGLC with indirect jump instructions. 
This variant is called PGLCij . 

In PGLCij, the same assumptions are made as in PGLDjj. Like in PGLDjj, 
the set {/.to |/ef,m6 M} is taken as the set 21 of basic instructions. 

PGLDjj has the following primitive instructions: 

— for each a G 21, a plain basic instruction a; 

— for each a £ 21, a positive test instruction +a; 

— for each a 6 21, a negative test instruction —a; 

— for each I € N, a direct forward jump instruction 

— for each I e N, a dzreci backward jump instruction 

— for each i G an indirect forward jump instruction \#i; 

— for each i £ [1,/], an indirect backward jump instruction 

PGLCy programs have the form ui ; . . . ; u^, where Ui,...,itfc are primitive 
instructions of PGLCij. 

The plain basic instructions, the positive test instructions, the negative test 
instructions, the direct forward jump instructions, and the direct backward jump 
instructions are as in PGLC. The effect of an indirect forward jump instruction 
i#i is that execution proceeds with the l-th next instruction of the program 
concerned, where I is the content of register i. If / equals 0, then deadlock occurs. 
If the i-th next instruction does not exist, then termination occurs. The effect 
of an indirect backward jump instruction is that execution proceeds with 
the l-th previous instruction of the program concerned, where I is the content 
of register i. If I equals 0, then deadlock occurs. If the i-th previous instruction 
does not exist, then termination occurs. 

We define the meaning of PGLCij programs by means of a function 
pglcij2pglc from the set of all PGLCij programs to the set of all PGLC pro- 
grams. This function is defined by 

pglcij2pglc(u! ; . . . ; u k ) = 

^i(ui) ; . . . ; ip k (uk) ; \#fc + 1 ; \#fc + 2 ; 
+regs.eq:l:0 ; \#Z' M)0 ; . . . ; +regs.eq:l:JV ; \#1' 1>1<N ; 

+regs.eq:l:0 ; \#Z' lifei0 ; • • • ; +regs.eq:l:AT ; \#l[ tktN ; 



+regs.eq:/:0 ; ; • • • ; +regs.eq:/:A^ ; \#l' IAtN ; 

+regs.eq:/:0 ; \#l' Iikfi ; • • • ; +regs.eq:/:A^ ; \#l' IXN ; 
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+regs.eq:l:0 ; \#{' M:0 ; 



; +regs.eq:l:iV ; \#{' MjAr ; 



+regs.eq:l:0 ; \#li >fe;0 ; • • • ; +regs.eq:l:AT ; \#/i, fcjA r ; 

+regs.eq:/:0 ; \#l'i,i,o I • • • ! +regs.eq:/:iV ; \#l'i,i >N 5 

+regs.eq:/:0 ; \M'i, k ,o I ■ ■ ■ ; +regs.eq:/:iV ; \#l'i,k,N , 

where the auxiliary functions tpj from the set of all primitive instructions of 
PGLCij to the set of all primitive instructions of PGLC is defined as follows 



(l<J<fc): 








= m 


if i + i < k , 




= \#i 


if j + l> k , 


^■(\#o 


= \#i, 










^•0\#<) 
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if u is not a jump instruction 



and for each i G [1, i], j G [1, fe], and ft G [0, TV]: 
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(N + 
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- ft < . 



Like in the case of indirect absolute jumps, the idea is that each indirect forward 
jump and each indirect backward jump can be replaced by a direct forward 
jump to the beginning of an instruction sequence whose execution leads to the 
intended jump after the content of the register concerned has been found by 
a linear search. However, the direct backward jump instructions occurring in 
that instruction sequence now depend upon the position of the indirect jump 
concerned in ui ; . . . ; Uk- To enforce termination of the program after execution 
of its last instruction if the last instruction is a plain basic instruction, a positive 
test instruction or a negative test instruction, + 1 ; \#fc + 2 is appended 
to ipi(ui) ; . . . ; ipk(uk)- Because the length of the translated program is greater 
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than k, care is taken that there are no direct forward jumps to instructions with 
a position greater than k. 

Let P be a PGLQj program. Then pglcij2pglc(P) represents the meaning 
of P as a PGLC program. The intended behaviour of P is the behaviour of 
pglcij2pglc(P) on interaction with a register file. That is, the behaviour of P, 
written |-P| PGLOiJ , is |pglcij2pglc(P)| PGLC / regs Regs init . 

The projection pglcij2pglc yields needlessly long PGLC programs because 
it does not take into account the fact that there is at most one indirect jump 
instruction at each position in a PGLCy program being projected. Taking this 
fact into account would lead to a projection with a much more complicated 
definition. 

10 PGLD with Double Indirect Jumps 

In this section, we introduce a variant of PGLDij with double indirect jump 
instructions. This variant is called PGLDdij. 

In PGLDdij, the same assumptions are made as in PGLDij. Like in PGLDij, 
the set {/.to /ef.me M} is taken as the set 21 of basic instructions. 

PGLDdij has the following primitive instructions: 

— for each a € 21, a plain basic instruction a; 

— for each a <E 21, a positive test instruction +a; 

— for each a € 21, a negative test instruction —a; 

— for each I e N, a direct absolute jump instruction 

— for each i e [1,1], an indirect absolute jump instruction 

— for each i € [1,1], a double indirect absolute jump instruction 

PGLDdij programs have the form u\ ; . . . ; Uk, where u\,. . . ,Uk are primitive 
instructions of PGLDdij. 

The plain basic instructions, the positive test instructions, the negative test 
instructions, the direct absolute jump instructions, and the indirect absolute 
jump instruction are as in PGLDij. The effect of a double indirect absolute 
jump instruction is that execution proceeds with the Z-th instruction of 

the program concerned, where I is the content of register i', where i' is the 
content of register i. If is itself the Z-th instruction, then deadlock occurs. 

If I equals or I is greater than the length of the program, termination occurs. 

Like before, wc define the meaning of PGLDdij programs by means of a 
function pglddij2pgldij from the set of all PGLDdij programs to the set of all 
PGLDij programs. This function is defined by 

pglddij2pgldij(ui ;...;uk)= max(fc+2,iV)-(fc+2) 
^(ui) ; . . . ; V(uit) ; ##0 ; ##0 ; ##0;.*.;##0 ; 
+regs.eq:l:l ; ; . . . ; +regs.eq:l:n ; ; ##0 ; 

+regs.eq:/:l ; ; . . . ; +regs.eq:/:n ; i##n ; ##0 , 
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where n = min(7, N) and the auxiliary function ip from the set of all primitive 
instructions of PGLDdij to the set of all primitive instructions of PGLDjj is 
defined as follows: 







if I < k , 




= ##o 


if I > k , 


###0 


= ■ 


i 




= **k 


) 


ip{u) 


= u 


if u is not a jump instruction 



and for each i £ [1,1]'- 

h = N + 1 + (2 • min(7, N) + 1) • (i - 1) . 

The idea is that each double indirect absolute jump can be replaced by an 
indirect absolute jump to the beginning of the instruction sequence 

+regs.eq:i:l ; i##l ; . . . ; +regs.eq:i:n ; ; ##0 , 

where i is the register concerned and n = min(7, N). The execution of this 
instruction sequence leads to the intended jump after the content of the register 
concerned has been found by a linear search. To enforce termination of the 
program after execution of its last instruction if the last instruction is a plain 
basic instruction, a positive test instruction or a negative test instruction, ##0 ; 
##0 is appended to i • • • i i>(uk)- Because the length of the translated 

program is greater than k, care is taken that there are no direct absolute jumps 
to instructions with a position greater than k. To deal properly with indirect 
absolute jumps to instructions with a position greater than k, the instruction 
is appended to ip(u-\) ; . . . ; ip(uk) ; ##0 ; ##0 a sufficient number of times. 

Let P be a PGLDdij program. Then pglddij2pgldij(P) represents the 
meaning of P as a PGLDy program. The intended behaviour of program P 
is the behaviour of pglddij2pgldij(P). That is, the behaviour of P, written 
|^|pcLD diJ , is |pglddij2pgldij(P)| PGLDi .. 

The projection pglddij2pgldij uses indirect absolute jumps to obtain the 
effect of a double indirect absolute jump in the same way as the projection 
pgldij2pgld uses direct absolute jumps to obtain the effect of an indirect ab- 
solute jump. Likewise, indirect relative jumps can be used in that way to obtain 
the effect of a double indirect relative jump. Moreover, double 1 indirect jumps 
can be used in that way to obtain the effect of a triple indirect jump, and so on. 

11 Stack Services 

In this section, we give a state-based description of the very simple family of 
services that constitute a bounded stack of which the elements are natural num- 
bers up to some bound. This stack will be used in Section 12 to describe the 
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behaviour of programs in a variant of PGLD with returning jump instructions 
and return instructions. 

It is assumed that a fixed but arbitrary number J has been given, which is 
considered the greatest length of the stack. It is also assumed that a fixed but 
arbitrary number N has been given, which is considered the greatest natural 
number that can be an element of the stack. 

The stack services accept the following methods: 

— for each n E [0, N], a stack push method push:n; 

— for each n E [0,iV], a stack top test method topeq:ra; 

— a stack pop method pop. 

We write -M st ack for the set {push:n, topeq:n | n E [0, N]} U {pop}. It is assumed 
that Attack C M. 

The methods of stack services can be explained as follows: 

— push:n : if the length of the stack is less than J, then the number n is put on 
top of the stack and the reply is T; otherwise nothing changes and the reply 
is F; 

— topeq:n: if the stack is not empty and the number on top of the stack is n, 
then nothing changes and the reply is T; otherwise nothing changes and the 
reply is F; 

— pop : if the stack is not empty, then the number on top of the stack is removed 
from the stack and the reply is T; otherwise nothing changes and the reply 
is F. 

Let s E [0, N]* be such that len(s) < J. Then we write Stack s for the service 
with initial state s described by S = {a E [0,7V]* | len(cr) < J} U {|}, where 
T ^ {cr G [0, TV]* | len(cr) < J}, and the functions eff and yld defined as follows 
(n,n ; G [0,7V], cr E [0,7V]*): 5 

eff(push:n, a) = (n) ^ a if len(cr) < J , 
eff (push:n, a) = a if len(er) > J , 

eff (topeq:n, cr) = a , 
eff (pop, (n) ~ cr) = cr , 
e#(pop,<» = <) , 

eff(m, cr) = T if m g Attack , 

eff(m, T) = T , 

5 We write D* for the set of all finite sequences with elements from set D. We use 
the following notation for finite sequences: ( ) for the empty sequence, (d) for the 
sequence having d as sole element, a ^ a' for the concatenation of finite sequences 
a and a' , and len(cr) for the length of finite sequence a. 
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yld (push:n, a) = T if len(er) < J , 

y/rf(push:n, a) = F if len(cr) > J , 

yld(topeq:n, (n 1 ) ^ a) = T if n = n' , 
yld(topeq:n, (n 1 ) ^ a) = F if n ^ n' , 
yld(topeq:n, ()) = F , 
yZd(pop, (n) ~ ct) = T , 
j//d(pop, ()) = F , 

yld(m, a) = B if m ^ -M s tack , 

»W(m, T) = B . 

We write Stack^n for Stack 

12 PGLD with Returning Jumps and Returns 

In this section, we introduce a variant of PGLD with returning jump instructions 
and return instructions. This variant is called PGLD r j. 

In PGLD r j, like in PGLDy, it is assumed that there is a fixed but arbitrary 
finite set of foci T with stack G T and a fixed but arbitrary finite set of methods 
M. Moreover, we adopt the assumptions made about stack services in Section 11. 
The set {f.m | / e JF\{stack}, m E M} is taken as the set 21 of basic instructions. 

PGLD r j has the following primitive instructions: 

— for each a G SI, a plain basic instruction a; 

— for each a G SI, a positive test instruction +a; 

— for each a G St, a negative test instruction —a; 

— for each / G N, an absolute jump instruction 

— for each I G N, a returning absolute jump instruction r##Z; 

— an absolute return instruction ##r. 

PGLD r j programs have the form u\ ; ... ; Uk, where m,...,Uk are primitive 
instructions of PGLD r j. 

The plain basic instructions, the positive test instructions, the negative test 
instructions, and the absolute jump instructions are as in PGLD. The effect of 
a returning absolute jump instruction r##Z is that execution proceeds with the 
l-th instruction of the program concerned, but execution returns to the next 
primitive instruction on encountering a return instruction. If r##^ is itself the 
Z-th instruction, then deadlock occurs. If I equals or I is greater than the length 
of the program, termination occurs. The effect of a return instruction ##r is that 
execution proceeds with the instruction immediately following the last executed 
returning absolute jump instruction to which a return has not yet taken place. 
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Like before, we define the meaning of PGLD r j programs by means of a func- 
tion pgldrj2pgld from the set of all PGLD r j programs to the set of all PGLD 
programs. This function is defined by 

Pgldrj2pgld(wi ; . . . ; u k ) = 

V>i(wi);...;Vfc(«fc);##0;##0; 

+stack.push:l ; ##1 ; ##/" ; . . . ; +stack.push:l ; ##fc ; ##/" ; 

+stack.push:n ; ##1 ; ; . . . ; +stack.push:n ; ##fc ; ; 

— stack. topeq:l ; ; stack. pop ; ##1 ; 

— stack. topeq:n ; ; stack. pop ; ##n ; 

where n = min(fc, N) and the auxiliary functions ipj from the set of all primitive 
instructions of PGLD r j to the set of all primitive instructions of PGLD is defined 
as follows (1 < j < k): 

^•(##0 =##^ \fi<k, 
^•(##0 =##o \u>k, 

^■(##0 = ##*', 

tpj{u) =u if u is not a jump instruction , 

and for each j e [1, k], I € N, and h 6 [1, min(fc, iV)]: 

l jt i = k + 3 + 3 • k ■ ({j - 1) + (I - 1)) if I < k A j < N , 
/j.i = j \f I < k Aj > N , 

Ij.i = if / > fc , 

Z' = fc + 3 + 3 • £; • min(fc, iV) , 

I" = I' + 4 • min(fc, TV) , 

J£ =r + 4-/i. 

The first idea is that each returning absolute jump can be replaced by an absolute 
jump to the beginning of the instruction sequence 

+stack.push:. ? ; ##Z ; ##/" , 

where j is the position of the returning absolute jump instruction concerned and 
I is the position of the instruction to jump to. The execution of this instruction 
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sequence leads to the intended jump after the return position has been put on 
the stack. In the case of stack overflow, deadlock occurs. The second idea is 
that each return can be replaced by an absolute jump to the beginning of the 
instruction sequence 

— stack. topeq:l ; ##/'/ ; stack. pop ; ##1 ; 
— stack. topeq:n ; ##^" ; stack. pop ; ##n ; 

where n = mm(k,N). The execution of this instruction sequence leads to the 
intended jump after the position on the top of the stack has been found by a 
linear search and has been removed from the stack. In the case of an empty 
stack, deadlock occurs. To enforce termination of the program after execution of 
its last instruction if the last instruction is a plain basic instruction, a positive 
test instruction or a negative test instruction, ##0;##0 is appended to ipi(ui ) ; 
• ■ - ]ipk(uk)- Because the length of the translated program is greater than k, care is 
taken that there are no non-returning or returning absolute jumps to instructions 
with a position greater than k. 

Let P be a PGLD r j program. Then pgldr j2pgld(P) represents the meaning 
of P as a PGLD program. The intended behaviour of P is the behaviour of 
pgldr j2pgld(P) on interaction with a stack. That is, the behaviour of P, written 

\ r | PGLD : j 

is |pgldrj2pgld(P)| 

PGLD /stack Stack{ D it. 

According to the definition of the behaviour of PGLD r j programs given above, 
the execution of a returning jump instruction leads to deadlock in the case 
where its position cannot be pushed on the stack and the execution of a return 
instruction leads to deadlock in the case where there is no position to be popped 
from the stack. In the latter case, the return instruction is wrongly used. In the 
former case, however, the returning jump instruction is not wrongly used, but 
the finiteness of the stack comes into play. This shows that the definition of the 
behaviour of PGLD r j programs given here takes into account the finiteness of 
the execution environment of programs. 

13 Conclusions 

We have studied sequential programs that are instruction sequences with di- 
rect and indirect jump instructions. We have considered several kinds of indirect 
jumps, including return instructions. For each kind, we have defined the mean- 
ing of programs with indirect jump instructions of that kind by means of a 
translation into programs without indirect jump instructions. Each translation 
determines, together with some memory device (a register file or a stack), the 
behaviour of the programs concerned under execution. 

The increase in the length of a program as a result of translation can be 
reduced by taking into account which indirect jump instructions actually occur 
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in the program. The increase in the number of steps needed by a program as 
a result of translation can be reduced by replacing linear searching by binary 
searching or another more efficient kind of searching. One option for future work 
is to look for bounds on the increase in length and the increase in number of 
steps. 

In [8], we have modelled and analysed micro-architectures with pipelined 
instruction processing in the setting of program algebra, basic thread algebra, 
and Maurer computers [13, 14]. In that work, which we consider a preparatory 
step in the development of a formal approach to design new micro-architectures, 
indirect jump instructions were not taken into account. Another option for future 
work is to look at the effect of indirect jump instructions on pipelined instruction 
processing. 
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